Scammers are buying Google ads to steal bank logins

The U.S. Department of Justice has extradited Russian national Sergei Anatolyevich Filimonov for his alleged involvement in an extensive bank account takeover scheme utilizing sponsored search engine advertisements. According to federal prosecutors, the cybercrime group purchased sponsored links on major search platforms including Alphabet's Google and Microsoft's Bing to spoof login portals of federally insured financial institutions. Victims searching for their online banking websites were redirected to fraudulent login pages where attackers harvested over 5,000 sets of login credentials. Investigators reported approximately $28 million in attempted losses and around $14.6 million in actual losses connected to this specific operation, while broader bank account takeover losses documented by the FBI have surpassed $262 million across more than 5,100 complaints since 2025. This abuse of paid search infrastructure highlights mounting cybersecurity vulnerabilities and reputational risks for digital advertising platforms. While Microsoft confirmed ongoing efforts to detect and eliminate malicious ads, regulatory and consumer scrutiny over ad vetting mechanisms on major search engines continues to rise.